APPLICATION NO. FILING DATE FIRST NAMED INVENTOR ATTORNEY DOCKET NO. CONFIRMATION NO. 



52427 7590 06/03/2008 I 

MUIRHEAD AND SATURNELLI, LLC I examiner 

200 FRIBERG PARKWAY, SUITE 1 00 1 dada, beemnet w 

WESTBOROUGH, MA 01581 I 



PAPER NUMBER 



MAIL DATE | DELIVERY MODE 

06/03/2008 PAPER 



Please find below and/or attached an Office communication concerning this application or proceeding. 

The time period for reply, if any, is set in the attached communication. 



PTOL-90A (Rev. 04/07) 



l/ffflrC? nVrliUli Otfff Iff ids y 


Application No. 

09/715,681 


Applicant(s) 

RAZ ET AL. 


Examiner 

BEEMNET W. DADA 


Art Unit 

2135 





- The MAILING DATE of this communication appears on the cover sheet with the correspondence address — 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )^| Responsive to communication(s) filed on 1 9 February 2008 . 
2a )£3 This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^3 Claim(s) 1 ,3-7,22,24-28,41 ,43-52 and 63-71 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) |EI Claim(s) 1. 3-7. 22. 24-28. 41. 43-52 and 63-71 is/are rejected. 

7) ^3 Claim(s) 1,22 and 41 is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) L~H The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)^ accepted or b)^ objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 0 Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 

3.Q Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

This office action is in reply to an amendment filed on February 19, 2008. Claims 1, 3-5, 22, 24-26, 41 
and 43-45 have been amended. Claims 1, 3-7, 22, 24-28, 41, 43-52 and 63-71 are pending. 

Response to Arguments 

Applicant's arguments filed February 19, 2008 have been fully considered but they are not persuasive. 

Applicant argues that the art on record does not teach determining, by the storage device, each track of 
the storage device that has been accessed for a write operation since a previous virus scan using information 
about tracks of the storage device without using information about a file structure, a file system or a file type. 
Applicant further argues that, the art on record fails to teach providing, to an antivirus unit by the storage 
device, information indicating which tracks of the storage device have been accessed for a write operation 
since the previous virus scan. Examiner disagrees. 

It is understood by the examiner in view of the specification, that 'tracks of a storage device' correspond 
to 'memory locations of the storage device where a file has been stored'. Examiner would point out that, 
'scanning a file implies scanning tracks of a storage device, because when a file is scanned, the memory 
location where the file is stored (i.e., tracks of the storage device) is also scanned. Furthermore, present 
specification page 15, liens 19-22, indicates "...Thus, the storage device may detect write operations to tracks 
of the device. Any files that are stored on the tracks that are written to since a previous virus scan may be 
deemed suspect and thus may be scanned for viruses." It is therefore understood by the examiner in view of 
the specification that, 'scanning tracks of a storage device to which write operation have been detected' is 
equivalent to 'scanning a file stored on a storage device to which write operation has been detected'. 

Examiner would point out that, Drew (US 6,928,555) teaches determining, by the storage device, each 
track of the storage device that has been accessed for a write operation since a previous virus scan using 
information about tracks of the storage device (i.e., determining a file opened for a write access is actually 
written, column 3, lines 40-55 and column 4, lines 5-25), providing, to an antivirus unit by the storage device, 
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information indicating which tracks of the storage device have been accessed for a write operation since the 
previous virus scan (the antivirus unit in conjunction with operating system getting the file and/or memory 
space of the file that has been accessed for write operation, column 3, lines 40-55 and column 4, lines 5-25). 
Furthermore, Waldin (US 6,094,731) teaches determining physical portions of the storage device that have 
been modified since a previous virus scan using information about the physical portions without using 
information about a file structure, a file system, or a file type [column 2, lines 57-64 column 6, lines 37-47 and 
column 3, lines 5-45], and scanning at least parts of the physical portions for viruses, wherein scanning 
performed without using information about a file structure, a file system or a file type [column 6, lines 43-46 
, column 7, lines 37-46, column 7, line 64 - column 8, line 8 and column 3, lines 5-45]. Examiner would point 
out that the art on record teaches the claim limitations and therefore the rejection is respectfully maintained. 

Claim Objections 

Claims 1, 22 and 41 are objected to because of the following informalities: there is no period at the end 
of the claims (the period has been deleted in the amendment). Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections set 
forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title, if the differences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill 
in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

Claims 1, 3-7, 22, 24-28, 41, 44-52, 63-66 and 71 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Drew US 6,928,555 B1 in view of Waldin et al. US Patent 6,094,731 (hereinafter Waldin) 



Application/Control Number: 09/715,681 Page 4 

Art Unit: 2135 

As per claims 1,41, 63, 65, 66 and 71 , Drew teaches a computer implemented method of scanning a 
storage device for viruses, comprising: 

determining, by the storage device, each track of the storage device that has been accessed for a write 
operation since a previous virus scan using information about tracks of the storage device (i.e., determining a 
file opened for a write access is actually written, column 3, lines 40-55 and column 4, lines 5-25), 

providing, to an antivirus unit by the storage device, information indicating which tracks 
of the storage device have been accessed for a write operation since the previous virus scan (the antivirus unit 
in conjunction with operating system getting the file and/or memory space of the file that has been accessed 
for write operation, column 3, lines 40-55 and column 4, lines 5-25); and 

scanning, by the antivirus unit using the information provided by the storage device, at 
least a portion of each track identified as having been accessed for a write operation since the 
previous virus scan for viruses (Note that scanning a file for a virus corresponds to scanning portions on the 
tracks of the storage device, column 3, lines 40-55 and column 4, lines 5-25). 

Drew is silent on the determining step being performed without using information about a file structure, 
a file system or a file type and performing scanning without using information about a file structure, a file type 
or a file system. 

In an analogous system, Waldin teaches determining physical portions of the storage device that have 
been modified since a previous virus scan using information about the physical portions without using 
information about a file structure, a file system, or a file type [column 2, lines 57-64 column 6, lines 37-47 and 
column 3, lines 5-45], and scanning at least parts of the physical portions for viruses, wherein scanning 
performed without using information about a file structure, a file system or a file type [column 6, lines 43-46 
, column 7, lines 37-46, column 7, line 64 - column 8, line 8 and column 3, lines 5-45]. 
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It would have been obvious to one having ordinary skill in the art at the time of applicant's invention to 
employ the teachings of Waldin within the system of Drew in order to further enhance the security of the 
system. 

As per claims 3 and 43, Waldin fruther teaches the method, wherein the physical portions correspond 
to sectors of the storage device [column 4, lines 4-8 and figure 1]. 

As per claims 4 and 44, Waldin further teaches the method, wherein the physical portions correspond 
to sub-portions of the storage device [column 4, lines 4-8 and figure 1]. 

As per claims 5 and 45, Waldin further teaches creating a table that is indexed according to each of the 
portions [fig 1 , unit 1 0 and column 4, lines 4-8]. Waldin also teaches scanning for viruses when it has been 
determined that portions have been modified [column 4, lines 9-12], and calculating a new hash value upon 
determination of a modification [column 4, lines 58-60]. Drew, further teaches scanning portions of a storage 
device to which a write operations have been directed (i.e., scanning a file for a virus corresponds to scanning 
portions on the tracks of the storage device) in accordance with information provided by the storage device 
[column 3, lines 40-55 and column 4, lines 5-25]. 

As per claims 6 and 7, Waldin further teaches method, wherein creating the table includes copying 
another table provided by the storage device [column 3, lines 50-55, figure 1, originating and recipient 
computers]. 

As per claims 46, 51 and 52 Waldin further teaches the method, wherein said means for coupling 
includes means for coupling to only one storage device [column 3, lines 47-55]. 
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As per claims 47-50, Waldin further teaches the method, wherein said means for coupling includes 
means for coupling to more than one storage device [column 8, lines 20-30]. 

As per claims 22, 24-28 and 64, the claimed steps correspond to the functions of the elements of the 
method claims 1 and 3-7, which has been rejected above and thus rejected with the same reason applied 
thereto. 

Claims 67-70 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over view of Drew US 
6,928,555 B1 in view of Waldin et al. US Patent 6,094,731 (hereinafter Waldin) and further in view of Ruff et al. 
US 6,802,028 (hereinafter Ruff). 

As per claims 67-70, Drew and Waldin teach scanning a storage device for viruses as indicated above. 
Furthermore, Ruff teaches an antivirus unit included in a disk controller of a storage device, wherein the disk 
controller is a first disk controller of a plurality of disk controllers included in the storage device, the antivirus 
unit is a first antivirus unit of a plurality of antivirus units included in the storage device and each of said 
plurality of disk controllers includes a different one of said plurality of antivirus units [column 7, line 53 - column 
8, line 34]. It could have been obvious to one having ordinary skill in the art at the time of applicant's invention 
to employ the teachings of Ruff within the combination of Drew and Waldin to achieve a predictable result of 
including an antivirus unit in a disk controller. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this Office action. 
Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded of the extension 
of time policy as set forth in 37 CFR 1 . 1 36(a). 
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A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the 
mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date of this 
final action and the advisory action is not mailed until after the end of the THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the advisory action. In 
no event, however, will the statutory period for reply expire later than SIX MONTHS from the date of this final 
action. 

Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to BEEMNET W. DADA whose telephone number is (571 )272-3847. The examiner can normally be 
reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Kim Y. Vu 
can be reached on (571 ) 272-3859. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866- 
217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or access to 
the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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May 24, 2008 
/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2135 



